Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Guest
Smaller organizations (up to 50 employees) usually implement the standard in up to 8 months. When using our Documentation Toolkit, normally: companies of up to 10 employees - usually implement the standard in up to 3 months and companies of up to 50 employees - usually implement the standard in up to 6 months.
You can find detailed information about how to plan and implement a quality management system in the following links:
If the products designed by Site "C" are not produced on Site "A" or Site "B"; Products of Site "C" are not included in the IATF scope of Site "A" or Site "B".
Since site "C" designs for another manufacturer (for other legal entities), "Site C" becomes a remote location within the scope of the other manufacturer.
For more information please see the following article
ISO 27001 and ISO 9001 share many requirements and these documents can be used after slightly adjustments:
These articles will provide you a further explanation about ISO 9001 and ISO 27001:
This material can also help you:
I'm assuming that by IRM you mean Integrated Risk Management.
Considering that, as a baseline for you to start I suggest the following material:
These materials will also help you regarding ISO 27001:
ISO 9001:2015 recommends the risk-based thinking applied to three situations:
In this free webinar on demand - The Process Approach - What it is, why it is important, and how to do it - https://advisera.com/9001academy/webinar/iso-9001-process-approach-free-webinar-on-demand/ I show how to relate processes and risks.
In this free webinar on demand - ISO 9001:2015 clause 4 - Context of the organization, interested parties, and scope - https://advisera.com/9001academy/webinar/iso-90012015-clause-4-context-of-the-organization-interested-parties-and-scope-free-webinar-on-demand/ I show how to relate context and risks.
The following material will provide you more information about risks and opportunities:
The ISO 45001:2018 standard does not define how you must create your documentation, or how it must look. In terms of procedures you can use whatever format works best for your organization, including flow charts, text documents, or even diagrammatic instructions if that is what works for your employees. As for records, again whatever format make sense to you for a particular record then that is what you can use. This is of course limited by any legal requirements that may exist for records and reports, such as a government form that needs to be submitted.
The general flow for creating documentation should go like this: What information do we need to document? Is there a required format to use (such as legal or other requirement)? If not, what is the best, and simplest, way we can record this information so that it is usable for us?
You can learn more about the new documentation requirements in the article: New approach to ISO 145001 documentation, https://advisera.com/45001academy/blog/2018/03/13/new-approach-to-iso-45001-documentation/
thank you carlos.
That is an almost personal question. In my opinion, based on my experience, a good study of the audit criteria is of paramount importance to develop a sound checklist in order to audit with confidence, based on audit criteria and not on opinion.
You can find more information below:
You asked the meaning of “qualification ,experience", which relates to the personnel clause 6.2.2 in ISO 17025.
It is mandatory that the requirements for each role are documented and records kept. It starts with identifying the personnel resource needs of the laboratory and defining them in terms of functional role, in terms of primary laboratory activities (refer to clause 5). Meaning that although the organisation may employ a person as say “Grade 4 laboratory staff”, their role is that of “technician”, “laboratory manager”, “lead analyst”, or “laboratory assistant”. For each of these functional roles, the laboratory must document requirements for education, qualification, training, technical knowledge, skills and experience.
Qualifications are formal evidence of completing and meeting (passing) the required criteria of an institution which has a formal authority through for example a national qualification framework, or chartered institution of professionals. Example requirement for a function could be an Honours degree or higher from a recognised university plus a National Certificate in Quality Management Systems through an formally recognised institution. Note that qualification requirements can also be part (completed modules), for example “conducting audits”, a module of the diploma.
Experience is knowledge and skills that a person gains over a period of time while participating in activities. For example, a requirement for a function a could be “Minimum five 5 years’ experience working in an ISO 17025 accredited analytical chemistry testing laboratory conducting sample testing and quality assurance activities. At least two years developing or reviewing management system documents and at least two years internal auditor experience”.
The following toolkit document Competence, Training and Awareness Procedure may be of assistance, available. There are four related appendices, all part of the toolkit available at https://advisera.com/17025academy/iso-17025-documentation-toolkit/
Design and implementing a quality management system (QMS) for a mechanical engineering firm implies being knowledgeable about ISO 9001:2015. Now the standard is less and less bureaucratic, it is up to each organization the task to design, develop and implement its QMS.
Setup a project sponsor, a project manager and a project team. Determine the scope of the QMS, your organization may decide to include only certain lines of business. Ensure top management support, get training and as a first step perform a Gap analysis, to determine the amount of work to be done - comparing what your organization already has in place versus ISO 9001:2015 requirements. From that GAP Analysis you can develop your Project Plan, listing what needs to be done, by whom, until when.
Then, an important step is to design a model of how your organization work as a set of interrelated processes. For example:
Decide how to describe and monitor those processes.
From there it is implementation in order to close the gaps found. Then, perform an internal audit and the management review. There you can decide if your organization is ready for a certification audit.
This is a very short description of the journey but below you can find more detailed information: